Master the vocabulary used in writing clear, blameless incident postmortems.
0 / 5 completed
1 / 5
During a postmortem, the team lists the sequence of events leading to the outage. What section is this called?
The timeline chronologically documents when the issue started, was detected, escalated, and resolved, usually with timestamps. It grounds the rest of the analysis in concrete facts. A clear timeline is often the most-referenced section during the retro discussion.
2 / 5
At standup, a lead reminds the team the postmortem should focus on systems, not individuals. What principle is this?
A blameless postmortem culture assumes people acted reasonably given the information they had, and focuses on fixing systemic gaps rather than assigning fault. This encourages honest reporting instead of covering up mistakes. It is considered foundational to effective incident learning.
3 / 5
In a design review of the incident process, the team distinguishes the immediate trigger from the deeper cause. What is the deeper cause called?
The root cause is the underlying condition that made the incident possible, as opposed to the proximate trigger event that set it off. Distinguishing the two prevents teams from fixing only the surface symptom. Root cause analysis techniques like the Five Whys help dig past the trigger.
4 / 5
An incident report needs concrete follow-up work with owners and deadlines. What is this section called?
Action items are the specific, assigned, and tracked follow-up tasks meant to prevent recurrence or improve detection/response. Without owners and deadlines, postmortems risk producing insight with no follow-through. This section turns learning into accountable work.
5 / 5
During a PR review of the postmortem doc, someone asks how badly customers were affected. Which term captures this scope?
Impact (sometimes called blast radius) describes the scope and severity of user or business effects, such as how many customers or requests were affected. It is distinct from the technical root cause. Quantifying impact helps prioritize the incident's follow-up work correctly.